Characteristic analysis of internet traffic from the perspective of flows

The necessity of network traffic monitoring and analysis is growing dramatically with increasing network usage demands from individual users as well as business communities. Most network traffic monitoring and analysis systems are based on flows. One key asset with these systems is to compress a significant amount of packet data into flows. However, the compression ratio is highly variable in the recent network environments due to the increased use of peer-to-peer file sharing applications and the frequent appearances of abnormal traffic caused by Internet worms, which negatively influences the performance of traffic analysis systems. The performance of traffic monitoring and analysis systems highly depends on the number of flows as well as link utilization and the pattern of packet arrival. This paper examines the characteristics of recent Internet traffic from the perspective of flows. We found that the frequent occurrence of flash flows highly affects the performance of the existing flow-based traffic monitoring systems. Using various flow-related metrics, we analyzed the IP traffic traces collected from the Internet junction at POSTECH, a university with over 6000 end hosts and servers.

[1]  James Won-Ki Hong,et al.  A Method on Multimedia Service Traffic Monitoring and Analysis , 2003, DSOM.

[2]  Chen-Nee Chuah,et al.  The impact of BGP dynamics on intra-domain traffic , 2004, SIGMETRICS '04/Performance '04.

[3]  Solange Ghernaouti-Hélie,et al.  Services and Applications , 1998 .

[4]  P. Hoffman.  Internet Draft , 1998 .

[5]  Alefiya Hussain,et al.  Effect of Malicious Traffic on the Network , 2003 .

[6]  Nick McKeown,et al.  Monitoring very high speed links , 2001, IMW '01.

[7]  Matthew Roughan,et al.  P2P the gorilla in the cable , 2003 .

[8]  Chase Cotton,et al.  Packet-level traffic measurements from the Sprint IP backbone , 2003, IEEE Netw..

[9]  Krishna P. Gummadi,et al.  An analysis of Internet content delivery systems , 2002, OPSR.

[10]  Cormac J. Sreenan,et al.  mmdump: a tool for monitoring internet multimedia traffic , 2000, CCRV.

[11]  James Won-Ki Hong,et al.  The Architecture of NG-MON: A Passive Network Monitoring System for High-Speed IP Networks , 2002, DSOM.

[12]  Nathaniel Leibowitz,et al.  ARE FILE SWAPPING NETWORKS CACHEABLE , 2002 .

[13]  홍원기.  The Architecture of NG-MON: A Passive Network Monitoring System , 2002 .

[14]  Jia Wang,et al.  Analyzing peer-to-peer traffic across large networks , 2002, IMW '02.

[15]  Wei Guo,et al.  Network monitoring in broadband network , 2001, Proceedings of the Second International Conference on Web Information Systems Engineering.

[16]  George Varghese,et al.  New directions in traffic measurement and accounting , 2002, CCRV.

[17]  Stefan Savage,et al.  Understanding Availability , 2003, IPTPS.

[18]  Mario Silva-Neto,et al.  Netflow services and applications , 2002 .

[19]  Aiko Pras,et al.  Analysing campus traffic using the meter-MIB , 2002 .

[20]  Peter Phaal,et al.  InMon Corporation's sFlow: A Method for Monitoring Traffic in Switched and Routed Networks , 2001, RFC.

[21]  Cristian Estan,et al.  New directions in traffic measurement and accounting , 2001, IMW '01.

[22]  Krishna P. Gummadi,et al.  A measurement study of Napster and Gnutella as examples of peer-to-peer file sharing systems , 2002, CCRV.

[23]  Nevil Brownlee,et al.  Traffic Flow Measurement: Experiences with NeTraMet , 1997, RFC.

[24]  Henry Shu-hung Chung,et al.  Rate-based internet accounting system using application-aware traffic measurement APNOMS 2003 , 2003 .